Post #1496664

@T_X @ffhl @cuechan … authentication. That's kind of a TOFU situation then. Regardless which way this works, for us this would boil down to placing a "sidecar" file (i.e. either credential file or confext file) next to the UKI in the ESP, so that systemd-stub picks it up in UEFI mode still, and the initrd then can just make use of it. That makes things very simple to provision for many cases, you could even do it from Windows or whatever, because it just means dropping in a…